----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,700 different Windows applications.

Request your account, the Secunia Network Software Inspector (NSI):
http://secunia.com/network_software_inspector/

----------------------------------------------------------------------

TITLE:
IBM Lotus Domino Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA27321

VERIFY ADVISORY:
http://secunia.com/advisories/27321/

CRITICAL:
Moderately critical

IMPACT:
Exposure of sensitive information, System access

WHERE:
>From remote

SOFTWARE:
IBM Lotus Domino 7.x
http://secunia.com/product/5746/
IBM Lotus Domino 6.x
http://secunia.com/product/720/

DESCRIPTION:
Multiple vulnerabilities have been reported in IBM Lotus Domino,
which can be exploited by malicious, local users to gain knowledge of
sensitive information and by malicious users to bypass certain
security restrictions or compromise a vulnerable system.

1) An unspecified error within the IMAP service can be exploited to
cause a buffer overflow.

Successful exploitation may allow execution of arbitrary code, but
requires a valid user account.

2) An error in LotusScript when using the "Evaluate" method combined
with certain @ formula commands to design views and agents may result
in situations where a view or agent returns information that should
not be accessible.

3) A security problem with Domino CA (Certificate Authority) process
commands on the server console may result in passwords being
displayed in clear text in the Admin panel and console.log when using
uppercase characters with either the CA "activate" or "unlock"
commands.

4) Insecure permissions on shared memory allows any local user to
access memory containing other users' data.

SOLUTION:
Update to version 7.0.3 or 8.0.

Vulnerability #1 is also addressed in version 6.5.6 FP2.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits:
1) VeriSign iDefense VCP
2) Michael Gollmick
3) An unknown IBM customer.
4) Ollie Whitehouse, Symantec.

ORIGINAL ADVISORY:
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg21270623
http://www-1.ibm.com/support/docview.wss?uid=swg21273266
http://www-1.ibm.com/support/docview.wss?uid=swg21261095
http://www-1.ibm.com/support/docview.wss?uid=swg21257030

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------